CVE-2015-2657 — Oracle Supply Chain Products Suite vulnerability

5 documents4 sources
Severity
4.0MEDIUMNVD
EPSS
0.2%
top 61.84%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Oracle Supply Chain Products Suite
Timeline
PublishedJul 16
Latest updateMay 17

Description

Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, and 6.3.0 through 6.3.7 allows remote authenticated users to affect confidentiality via unknown vectors related to Business Process Automation.

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 8.0 | Impact: 2.9

Affected Packages1 packages

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-hmf5-7f3h-jqqr: Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6↗2022-05-17
▶
CVEList
CVE-2015-2657: Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6↗2015-07-16
▶

💬Community

2
Bugzilla
CVE-2015-7214 Mozilla: Cross-site reading attack through data: and view-source: URIs (MFSA 2015-149)↗2015-12-15
▶
Bugzilla
CVE-2015-7205 Mozilla: Underflow through code inspection (MFSA 2015-145)↗2015-12-15
▶
CVE-2015-2657 — Oracle vulnerability | cvebase